Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsZtkG95Qt87d7_e3f0An-sr_SE.cer
File:                     HsZtkG95Qt87d7_e3f0An-sr_SE.cer (raw, json)
Hash identifier:          SRRuP/ZUFa5MjhORGnOJLe7HSSGj8F2NcZyqq83VUD4=
Subject key identifier:   1E:C6:6D:90:6F:79:42:DF:3B:77:BF:DE:DD:FD:00:9F:EB:2B:FD:21
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       026B83
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D4781/E290476CA48D11F0AD97F016C4F9AE02/HsZtkG95Qt87d7_e3f0An-sr_SE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D4781/E290476CA48D11F0AD97F016C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 08 Oct 2025 21:29:39 +0000
Certificate not after:    Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources:    AS: 154288
                          IP: 2402:3120::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 20:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158595 (0x26b83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct  8 21:29:39 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=A91D4781, serialNumber=1EC66D906F7942DF3B77BFDEDDFD009FEB2BFD21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:33:bd:b9:d4:17:df:d7:55:01:f0:49:c5:2a:
                    1d:b1:24:86:44:cf:85:f5:ff:96:e5:7c:a9:d3:b6:
                    1a:ec:58:19:17:13:e0:ac:9a:c5:06:56:78:ba:de:
                    96:41:19:88:27:51:79:89:fd:6a:2c:0d:2b:95:d5:
                    d4:d6:d4:41:78:6f:b3:3e:22:f0:f6:01:47:ea:02:
                    fa:ab:76:a6:7a:9c:be:d7:23:81:70:92:51:09:11:
                    6a:2a:d6:bd:c8:1e:e5:e9:ee:25:d7:40:b9:4f:23:
                    08:ad:6e:f1:12:34:bc:26:19:95:d7:fe:34:de:3b:
                    20:b8:ad:e4:76:0e:5f:67:ca:68:3a:87:70:80:bd:
                    f1:e7:56:57:28:96:ed:77:24:b8:38:1a:94:2b:3c:
                    c9:8c:01:98:76:16:8f:17:01:cd:7c:e2:22:61:67:
                    ae:f0:ec:ae:5f:70:a5:fa:45:82:23:55:7c:1a:1b:
                    8f:43:97:9a:38:9e:5e:19:65:75:88:2d:1d:f5:3d:
                    f3:60:1c:4d:6a:a4:63:32:44:32:c2:ba:b0:25:4a:
                    c4:4f:ca:3e:1b:3c:94:09:68:67:fc:57:42:b8:cd:
                    ff:0b:9e:37:c7:0f:89:23:b1:35:5d:ab:0a:09:86:
                    62:52:13:f5:9c:37:95:cd:31:c6:55:47:be:7c:11:
                    f4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C6:6D:90:6F:79:42:DF:3B:77:BF:DE:DD:FD:00:9F:EB:2B:FD:21
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D4781/E290476CA48D11F0AD97F016C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D4781/E290476CA48D11F0AD97F016C4F9AE02/HsZtkG95Qt87d7_e3f0An-sr_SE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  154288

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:3120::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:b4:03:82:42:cd:ee:d2:cc:f1:66:be:fd:5b:8f:bd:86:b3:
         b9:6a:bd:67:04:84:a5:35:9c:42:d2:3a:05:f1:e5:c2:3f:75:
         90:ad:b5:3e:76:57:2c:75:06:67:33:b4:c3:be:8c:1c:c8:51:
         74:78:ce:04:6c:8e:05:aa:fb:fd:2a:6a:8a:c8:ac:a0:43:b4:
         ae:e3:8c:b6:03:ed:d4:57:69:4f:83:70:d9:a6:77:89:86:72:
         b7:b4:75:e4:f5:b0:27:c4:0f:dc:2f:30:42:2f:8f:24:32:90:
         d6:29:42:06:a0:70:e6:c9:dc:0f:a6:df:b2:63:e8:5a:06:9f:
         49:6d:15:96:58:74:4b:77:89:5b:b0:c9:e6:d3:c8:68:7e:37:
         6c:13:e4:74:70:27:aa:64:db:c9:c6:45:9c:83:80:fa:6c:3d:
         0c:39:89:8f:c8:49:d0:e7:84:ef:eb:2b:5c:94:4f:8b:76:cc:
         1c:c6:87:83:52:5c:eb:61:27:94:0f:98:a7:a0:ac:19:5f:8b:
         9c:25:6d:8e:fc:f2:40:61:2c:54:1e:bd:fe:14:97:39:70:2f:
         e9:c8:ea:a7:19:9c:9f:fa:91:51:6c:e2:0f:a0:78:14:75:32:
         2e:81:1d:73:48:e3:48:c2:11:19:64:e9:d8:8d:5b:26:4d:f5:
         a7:05:81:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:23:14 2025 by rpki-client